CVE-2024-7387

Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy

State: Published
Severity: 9.1 Critical
Published: Sep 16, 2024
Updated: Aug 11, 2026
Reserved: Aug 1, 2024

Description

A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build container can be overridden using the `spec.source.secrets.secret.destinationDir` attribute of the `BuildConfig` definition. An attacker running code in a privileged container could escalate their permissions on the node running the container.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H	redhat

Weaknesses

CWE-250 Execution with Unnecessary Privileges

Affected Products

Product	Versions
openshift/builder	before 0b62633adfa2836465202bc851885e078ec888d1Affected
Red Hat OpenShift Container Platform 4.12Red Hat	v4.12.0-202409121032.p1.g609473f.assembly.stream.el8 and laterNot affected
Red Hat OpenShift Container Platform 4.13Red Hat	v4.13.0-202409120505.p1.g2c7e99d.assembly.stream.el8 and laterNot affected
Red Hat OpenShift Container Platform 4.14Red Hat	v4.14.0-202409111409.p1.g52565ca.assembly.stream.el8 and laterNot affected
Red Hat OpenShift Container Platform 4.15Red Hat	v4.15.0-202409101936.p1.ge7749a3.assembly.stream.el8 and laterNot affected
Red Hat OpenShift Container Platform 4.16Red Hat	v4.16.0-202409101737.p1.gfee4b58.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.17Red Hat	v4.17.0-202409122005.p1.gcfcf3bd.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gc395190.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g987615c.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g3385690.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502101302.p0.g763313c.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502041632.p0.g6182930.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501281202.p0.g336d783.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g914783c.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502010001.p0.g061909a.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.ge905646.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g526498a.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.ga371641.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502040032.p0.gc864494.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gd352778.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g700802f.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g314589c.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	418.94.202502100215-0 and laterNot affected

References

RHSA-2024:3718vendor-advisory
RHSA-2024:6122vendor-advisory
RHSA-2024:6685vendor-advisory
RHSA-2024:6687vendor-advisory
RHSA-2024:6689vendor-advisory
RHSA-2024:6691vendor-advisory
RHSA-2024:6705vendor-advisory
https://access.redhat.com/security/cve/CVE-2024-7387vdb-entry
RHBZ#2302259issue-tracking
https://github.com/openshift/builder/commit/0b62633adfa2836465202bc851885e078ec888d1
https://stuxxn.github.io/advisory/2024/10/02/openshift-build-docker-priv-esc.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.